Question & Answer
Question
The readme file that comes with the PEM installation files mentions running some scripts post install to re-encrypt routes.
Reference: ##
Post install/upgrade patching the routes (Configure SSL for OpenShift Route) This chart supports re-encrypt routes and requires the destination CA certificate to be configured in the route. After installing/upgrading, you must patch the routes manually for PEM, PR, PP, and API Gateway server with the CA certified TLS certificate.
The `routePatch.sh` script allows you to patch all the routes created through the helm install with the certificate information based on the <Release_name>.
Steps to patch the routes:
1. Download the `ibm_cloud_pak/pak_extensions/post-install/routePatch.sh` script file.
2. Update the following properties in the script:
* RELEASE_NAME= #Provide the release name used during helm install
* PEM_DEST_CABUNDLE_FN= #Path to the Destination CA certificate for PEM server
* PR_DEST_CABUNDLE_FN= #Path to the Destination CA certificate for PR server
* PP_DEST_CABUNDLE_FN= #Path to the Destination CA certificate for PP server
* AG_DEST_CABUNDLE_FN= #Path to the Destination CA certificate for API Gateway server
``
3. Ensure the routePatch.sh script and all destination CA certificates have the read and execute permissions (755).
4. Run the script
Answer
If we already have the routes patched in the previous version, then you will not need to run the scripts again after upgrading to 624.
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSFG8Z","label":"IBM Sterling Partner Engagement Manager Software"},"ARM Category":[{"code":"a8m50000000L3ClAAK","label":"General Inquiry"}],"ARM Case Number":"TS018736421","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
20 March 2025
UID
ibm17214613